Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TdK63bSSfY6IERWlQBwr8AKBnbc.roa
File: TdK63bSSfY6IERWlQBwr8AKBnbc.roa (raw, json)
Hash identifier: h3BD6MsqEVI5rnewiHvVv9LOWiqVJRwQcwEVc2s07IE=
Subject key identifier: 4D:D2:BA:DD:B4:92:7D:8E:88:11:15:A5:40:1C:2B:F0:02:81:9D:B7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A033EFD0049D976869AB00A353C9C344C3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TdK63bSSfY6IERWlQBwr8AKBnbc.roa
Signing time: Mon 24 Aug 2026 13:22:29 +0000
ROA not before: Mon 24 Aug 2026 13:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 151.247.3.0/24 maxlen: 24
151.247.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:ef:d0:04:9d:97:68:69:ab:00:a3:53:c9:c3:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 13:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dd2baddb4927d8e881115a5401c2bf002819db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:9b:55:04:ff:d7:db:fa:95:f3:40:ee:84:
73:1a:8c:ca:53:a9:fa:e6:41:fc:5d:80:a4:d0:24:
f9:c5:ad:44:4d:d1:32:b9:10:e3:b4:ed:0d:bb:b8:
f9:d9:3c:80:a1:bd:36:72:81:37:16:45:dc:ca:43:
45:13:e8:9e:f3:f0:bf:f1:34:5b:23:81:05:a2:45:
14:70:11:35:bc:7c:46:1c:80:8e:a4:10:73:df:80:
a3:5c:31:e8:03:b4:c7:84:49:99:48:30:d3:7a:93:
6e:ca:85:f9:bb:84:56:b2:27:46:b6:4b:0f:dc:e7:
3e:9d:50:ff:71:0c:b0:63:93:01:63:3b:19:39:a2:
31:b9:cf:bb:6f:25:e0:00:d4:58:5d:d3:82:70:a7:
bb:46:0d:0c:93:a5:3d:5e:30:14:b4:d5:ba:2f:58:
3f:9b:3c:dc:21:ff:66:4b:3b:2c:24:26:8b:63:11:
40:c9:3d:91:57:fc:e0:de:47:8d:fa:19:9c:b0:f9:
5b:c5:38:23:9f:44:df:f3:fb:ed:02:af:52:41:8c:
2d:a3:33:cc:25:7a:36:c0:d2:76:3a:d0:2c:f7:16:
54:e5:5e:ae:67:3f:02:d2:29:04:08:a1:dc:44:ad:
86:45:be:73:2f:59:64:ce:45:dd:e8:8a:2c:3c:d5:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:BA:DD:B4:92:7D:8E:88:11:15:A5:40:1C:2B:F0:02:81:9D:B7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TdK63bSSfY6IERWlQBwr8AKBnbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.3.0/24
151.247.107.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:ee:3a:c0:6f:c2:6c:ed:66:8b:c2:b4:75:50:3c:5e:f5:
d3:cb:99:cc:5e:ef:96:5c:67:e4:1f:b9:17:90:f3:4e:dd:3a:
96:ca:68:38:62:62:ae:85:82:26:40:39:bf:a7:60:c8:3c:8a:
a8:31:46:60:cd:d2:c1:c8:3a:9b:4a:02:e6:de:23:6b:12:9f:
ad:4a:a4:9a:e9:df:ae:b8:a4:a7:c7:fb:c4:82:07:51:3a:43:
46:ef:4f:ab:6f:d8:54:84:9a:73:fb:c3:b0:9a:fd:44:c8:52:
63:56:16:be:7e:07:15:eb:34:ea:b5:2c:33:c9:3c:11:ee:7c:
2b:18:c9:1c:68:bb:27:e1:45:e1:0c:53:0f:50:4c:90:cf:d2:
c5:de:0d:b9:2f:af:a9:7a:fa:23:9b:be:37:8a:a0:3c:90:9b:
be:8d:78:19:58:4b:91:65:c7:13:0d:df:76:b0:dc:16:aa:e2:
11:c1:a3:c1:45:d8:1d:ba:2f:87:7d:1a:82:72:2e:9e:0c:d2:
66:41:d4:f2:ec:30:ac:12:1b:f8:96:71:4a:db:07:05:a4:da:
e1:be:6e:ec:f1:87:eb:ce:41:8d:89:36:57:88:3a:82:20:30:
87:d6:a0:fd:05:95:55:81:e6:82:e4:84:0d:40:d9:74:4d:de:
12:0c:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:25:52 2026 by rpki-client